The big corporations may grab the headlines, but America's SMBs have the most to lose in the aftermath of a data breach.

Credential compromise emerged the main target for phishing campaigns in 2018 - rather than infecting victims' devices with malware.

The most common attacks involved software vulnerabilities, stolen credentials, Web applications, and IoT devices.

Using Google App Engine to mask the destination of links is a staggeringly easy way to conduct a phishing campaign, but Google claims it is not their problem.

Attack threatens victims with three deadly malware infestations if they don't give up critical email account credentials.

Attack threatens victims with three deadly malware infestations if they don't give up critical email account credentials.

Make using SSH key authentication a snap with the new ssh-agent feature found in KeePassXC.

You can call it collateral damage. You can call it trickledown cyberwarfare. Either way, foreign hacker armies are targeting civilian enterprises — as a means of attacking rival government targets.

Breach latest example of how misconfigurations, human errors undermine security in a big way, experts say.

A new wave of attacks abuses the Google Cloud Platform URL redirection in PDF decoys, sending users to a malicious link.

A look at API attack trends such as the current (and failing) architectural designs for addressing security of these API transactions.

Many organizations find that getting their data privacy house in order is paying off.

Metasploit 5.0 offers a host of service-oriented features, along with a new commitment from Rapid7 for regular releases.

Adverts on Facebook featuring fake celebrity endorsements scam people out of their savings, and Facebook is now doing something about it.

A man has been arrested a year after stealing €10m ($15m) of the IoT-focused cryptocurrency IOTA using bogus software that tricked users.

Your likes, interest and personality can be gleaned from as few as 8-9 friends on social media, whether you’re on the platform or not.

The US Department of Homeland Security (DHS) has issued an emergency directive tightening DNS security after a recent wave of domain hijacking attacks targeting government websites.

Emotet is moving, shape-shifting target for admins and their security software. Here’s what we’ve learned from dealing with outbreaks.

Interest in bug bounty programs is exploding, as companies look to crowdsourcing to combat hackers. But several misconceptions remain.